KVKK व्यक्तिगत डेटा संरक्षण सूचना

01 Data Controller

Your personal data is processed by WorldNet Telekomünikasyon ve Bilişim Teknolojileri Sanayi ve Ticaret Limited Şirketi (“WorldNet”) as the data controller, within the scope described below.

Trade Name

WorldNet Telekomünikasyon ve Bilişim Teknolojileri Sanayi ve Ticaret Limited Şirketi

MERSIS No

0176-0402-0285-6696

Address

Piri Reis Mah. 591. Sk. No:7T Esenyurt/İstanbul

Registered E-mail (KEP)

[email protected]

E-mail

[email protected]

Phone

0850 308 19 99

02 Who Does This Notice Cover?

This notice covers WorldNet subscribers, prospective subscribers who run an availability check or leave an application, users of worldnet.com.tr and the customer portal (oim.worldnet.com.tr), people who call our contact centre or write to us via WhatsApp or e-mail, and job applicants.

03 Personal Data We Process

Which data is processed depends on your relationship with us. We only process the data the service requires and the law makes mandatory.

Identity

Name and surname, Turkish ID number (passport or foreigner ID number for foreign nationals), date of birth and the identity document details required by law for the subscription contract.

Contact

Mobile phone number, e-mail address and correspondence address.

Address and Infrastructure

Installation address, address code (UAVT / BBK), building and flat details, the availability result for the address and the map location of the installation point.

Customer Transactions

Subscriber number, selected package, contract and commitment details, application, fault, complaint and request records, correspondence.

Finance

Invoice, payment, debt and collection details; bank account (IBAN) details where a refund is due. Card payments are processed on the systems of the relevant bank or payment institution.

Traffic and Connection

IP addresses assigned to you, start and end times of connection sessions, connection username, line speed and signal measurements. The content of your communications is not inspected or recorded.

Device

Brand, model, serial number, MAC address and software version of your modem and fibre termination device, and the settings needed for remote management.

Visual and Audio

Contact centre call recordings; photos, voice messages and documents you send via WhatsApp; installation photos taken during installation and repair work.

Marketing

Your consent or refusal for commercial electronic messages and your communication preferences.

Transaction Security

Customer portal login records, verification code delivery records and our website security logs.

Legal Proceedings

Requests from competent authorities, dispute and objection records.

04 Purposes of Processing

We process your personal data for the following purposes and only to the extent they require:

• Checking availability at your address, taking your application and scheduling installation
• Concluding the subscription contract, activating the service and providing it throughout the contract
• Carrying out invoicing, collection and accounting
• Providing technical support, detecting and fixing faults, managing your modem remotely
• Operating, monitoring and securing our network and planning its capacity
• Meeting the record-keeping, retention and reporting obligations arising from Laws No. 5651 and 5809 and the regulations of the Information and Communication Technologies Authority (BTK)
• Providing the Safe Internet Service
• Recording and resolving your requests, suggestions and complaints
• Measuring service quality and training our staff
• Sending campaign, new service and promotional information if you have given consent
• Responding to lawful requests from competent authorities and conducting legal proceedings
• Securing our website and portal and preventing misuse

05 Legal Bases

Your personal data is processed on the following legal bases listed in Article 5(2) of the KVKK:

• It is expressly provided for by law (Electronic Communications Law No. 5809, Law No. 5651, Law No. 6563 on the Regulation of Electronic Commerce, Tax Procedure Law No. 213, Turkish Commercial Code No. 6102 and related regulations)
• It is directly related to concluding or performing the subscription contract
• It is necessary for us to fulfil our legal obligations as data controller
• It is necessary to establish, exercise or protect a right
• It is necessary for our legitimate interests, such as network security and service quality, provided it does not harm your fundamental rights and freedoms

06 When Consent Is Required

Commercial electronic messages for campaigns and promotions (SMS, e-mail, calls) are only sent if you have given consent under Law No. 6563. You can withdraw your consent at any time through the Message Management System (İYS), the opt-out link in the message or by writing to us; withdrawal does not affect mandatory service notifications (invoices, faults, planned works).

For any processing where none of the legal bases above applies, we ask for your explicit consent separately. Not giving consent does not affect your subscription, and you can withdraw consent at any time.

07 How We Collect Data

Your personal data is collected by automated or partly automated means, verbally, in writing or electronically, through the following channels:

• The availability check, application, contact, complaint and job application forms on our website
• The customer portal and subscription screens
• Our contact centre, WhatsApp, e-mail and social media accounts
• Our Esenyurt and Silivri branches and the field teams who visit your address for installation and repairs
• Our network equipment, such as connection, authentication and modem management systems
• The availability and ordering systems of the infrastructure provider Türk Telekom

08 Who We Share Data With

Your personal data may be transferred to the following groups of recipients only as far as necessary for the purposes above and in line with Article 8 of the KVKK. We never sell or rent your data.

Competent Authorities

BTK, judicial authorities and law enforcement (upon lawful request), tax offices, the Personal Data Protection Authority, consumer arbitration committees and other competent public bodies.

Infrastructure Provider

The identity, address and line details needed for application, activation and fault handling at addresses we serve over Türk Telekom infrastructure.

Our Service Providers

Companies providing us with servers and hosting, subscriber management and billing software, SMS and contact centre infrastructure, e-mail, messaging and AI-assisted customer assistant services, which process data only on our instructions.

Financial Institutions

Banks and payment institutions for payments and refunds.

Advisers

Our legal, accounting and audit advisers, who are bound by confidentiality.

09 Transfers Abroad

Some of our service providers have servers outside Türkiye. These include our website security and content delivery infrastructure, the WhatsApp Business messaging service, e-mail services, and AI-assisted written and voice customer assistant services.

These transfers are made in line with the conditions and safeguards set out in Article 9 of the KVKK (an adequacy decision, standard contractual clauses or other appropriate safeguards; failing these, your explicit consent) and only as far as the service requires.

10 Retention Periods

We keep your personal data for as long as the purpose of processing requires and the law prescribes. When the period ends, the data is deleted, destroyed or anonymised.

Subscription Records

For the term of the contract and, after it ends, for the statutory limitation period for possible disputes (generally 10 years).

Invoices and Accounting

For the retention periods set by the Tax Procedure Law and the Turkish Commercial Code (5 to 10 years).

Traffic and Connection

For the period set by Law No. 5651 and BTK regulations; deleted at the end of that period.

Call Recordings and Correspondence

For as long as needed to resolve the request, measure service quality and provide evidence; if there is a dispute, until it is resolved.

Unconverted Applications

Application and availability check records that do not become a subscription, for at most 1 year from the last action.

Job Applications

For the duration of the recruitment process; unsuccessful applications for at most 1 year so they can be considered for future positions. You can ask for earlier deletion.

11 Your Rights Under the KVKK

Under Article 11 of the KVKK, you can apply to us to exercise the following rights:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether data is used in line with that purpose
• To know the third parties in Türkiye or abroad to whom it has been transferred
• To request correction if it is incomplete or inaccurate
• To request deletion or destruction under the conditions of Article 7 of the KVKK
• To request that correction, deletion and destruction be notified to the third parties to whom the data was transferred
• To object to an outcome against you that results from analysis solely by automated systems
• To claim compensation if you suffer damage due to unlawful processing

12 How to Apply

You can submit requests about your rights through one of the channels below, in line with the Communiqué on the Procedures and Principles of Applications to the Data Controller. Your application must state your name and surname, Turkish ID number (nationality and passport number for foreigners), address for notification, e-mail address and phone number if any, and the subject of your request, and must be signed.

We resolve your application free of charge within 30 days at the latest, depending on its nature; if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, you find our answer insufficient or we do not answer in time, you may complain to the Personal Data Protection Board within 30 days of learning our answer and in any case within 60 days of your application.

In Writing

By a signed petition, delivered by hand or by post to: Piri Reis Mah. 591. Sk. No:7T Esenyurt/İstanbul

KEP

From your registered e-mail (KEP) address to [email protected]

E-mail

With a secure electronic or mobile signature, or from the e-mail address registered in our system, to [email protected]

13 Changes

This notice may be updated in line with changes in legislation and our services. The current version is always published on this page; the last update date appears at the top of the page.